Networking, Wi-Fi & Fibre Optics

Network Planning for Large Properties in Zanzibar: Resorts, Estates and Campuses

A site with several buildings needs a fibre backbone in ducts from one core room to a cabinet in each building, a UPS in every cabinet and separate networks for each system. Plan it before landscaping, and it works on day one and grows without being dug up again.

  • Intermediate
  • About 15 min
  • Zanzibar resource
  • Last reviewed
Start the guide

Overview

What you will learn

  • Why buildings are joined with fibre, not copper
  • How a core room, ducts and building cabinets form a star backbone
  • How SFP modules and fibre panels connect the backbone to switches
  • Why every cabinet needs its own UPS
  • When a fibre ring or a wireless link makes sense

Applies to

  • Single-mode or multimode fibre in underground ducts
  • Fibre patch panels (ODF) and SFP modules
  • Managed and PoE switches in each building
  • Outdoor-rated access points and cameras
  • UPS and surge protection in every cabinet

Tools Required

No tools needed.

Before you start

  • A current site plan with existing and future buildings

Important

  • Never look into a fibre connector; it can carry invisible laser light.
  • Trenching, pole work and mains power are hazardous and need trained installers.
  • A fibre ring without loop protection on the switches can stop the whole network.

Step-by-Step Guide

How a fibre backbone connects a large site

1 / 7 steps

Primary Failover Power Fibre ISP Backup link Firewall Core switch Recorders Core UPS

Step 1

Start from one core room

  1. The internet links, firewall, core switch, recorders and servers sit in one cool, secure room on a UPS.

    Expected result: Everything on the site connects back to one place that is easy to protect and manage.

  2. Fibre leaves the core through a patch panel and runs in underground ducts, with draw pits, to every building.

    Expected result: Distance is no longer a limit, and surges cannot travel between buildings on the cable.

  3. In each building, a fibre patch cord runs from the panel to an SFP module in the switch. Both ends must match the fibre type.

    Expected result: The building switch links to the core at full speed.

  4. From the building switch, copper cable runs under 100 metres to rooms, access points and cameras, with PoE power.

    Expected result: Each building is a small, self-contained network fed by the backbone.

  5. Where a road or heritage wall blocks a duct, a point-to-point wireless link with clear line of sight joins the building.

    Expected result: The gatehouse or outbuilding joins the network without digging.

  6. Each building cabinet has a UPS and surge protection, not just the core room.

    Expected result: During a cut, every building stays connected instead of breaking into islands.

  7. A second fibre path closes the star into a ring. Switches run loop protection so only one path carries traffic at a time.

    Expected result: If one fibre is cut, traffic takes the other way round in seconds.

Troubleshooting

Common problems and how to fix them

1 Switches at both ends fail after storms

Likely cause Copper cable between buildings carrying surges.

Solution Replace the link with non-metallic fibre and add surge protection.

2 No link on a new fibre run

Likely cause SFP modules do not match the fibre type, wavelength or connector.

Solution Check both modules against the fibre and replace mismatched ones.

3 Whole network stops after adding a second fibre

Likely cause A ring without loop protection created a network loop.

Solution Unplug the second link and configure loop protection on the switches first.

4 Buildings go offline in every power cut

Likely cause UPS only in the core room.

Solution Fit a UPS in every cabinet with active equipment.

5 Outdoor Wi-Fi patchy across the estate

Likely cause Wireless mesh hops or too few outdoor access points.

Solution Wire outdoor access points to building switches after a coverage survey.

6 Nobody knows which fibre goes where

Likely cause No labels or fibre map.

Solution Label both ends and keep a fibre map and network diagram.

In Depth

In Depth

A site with several buildings needs a fibre backbone in ducts from one core room to a cabinet in each building, a UPS in every cabinet and separate networks for each system. Plan it before landscaping, and it works on day one and grows without being dug up again.

This guide is for developers, owners and facility managers of resorts, residential estates, compounds, school and college campuses, hospitals and warehouses in Zanzibar. A single building can often get by with one switch cabinet and a few access points. Spread the same needs across a site, and distance, the ground between buildings, lightning and the number of systems sharing the network all change the design.

What makes large sites different

Distance. Twisted-pair Ethernet (Cat5e, Cat6 and similar) is limited to 100 metres per channel, including patch leads: at most 90 metres of fixed cable plus the cords at each end. Beyond that you need fibre, a wireless link or an intermediate switch. Our comparison of fibre optic and Ethernet explains the trade-offs.

Lightning and earth differences. Copper cable between buildings can carry surges from nearby lightning, and buildings on separate supplies can sit at different earth potentials. Both destroy switch ports at either end. A non-metallic fibre cable carries light, not electricity, and breaks that path. If you use armoured fibre with metal parts, the armour must be earthed correctly.

Salt air, sun and rain. Near the coast, outdoor cabinets, cameras, access points and joints corrode and overheat. Specify outdoor-rated, sealed equipment, shaded or ventilated cabinets and stainless fixings.

Power. Buildings may have separate supplies, and cuts hit them at different moments. Every cabinet with active equipment needs its own UPS, or the network breaks into islands during a cut.

Ground conditions. Coral rock and sand affect trenching and duct depth. Plan routes early, ideally before landscaping and paving.

Many systems, one network. Guest or resident Wi-Fi, offices, CCTV, access control, intercoms, fire alarm interfaces, PA, smart controls and payments all share the backbone, and each must be kept apart.

Distance from support. Skilled technicians can be scarce outside town and spares often come from Dar es Salaam. Design for remote monitoring and keep spares on site.

  1. A core room in a central, secure, cool location, holding the main router or firewall, core switch, recorders and servers on a properly sized UPS, with surge protection and earthing.
  2. Fibre from the core to each building in underground ducts, ending on a fibre patch panel (ODF) at each end.
  3. A distribution cabinet in each building with a managed switch (PoE if it powers cameras or access points), the fibre panel and a UPS. The fibre plugs into the switch through SFP modules or a media converter. Our explainer on what a network switch is covers SFP ports and PoE.
  4. Copper from each cabinet to the rooms, cameras and access points in that building, within 100 metres.

Choosing the fibre. Single-mode fibre handles the longest distances and future speeds, and is the usual choice for outdoor and site backbones. Multimode is common inside buildings and can suit shorter runs: for example, common 10 Gbps multimode modules reach 300 metres on OM3 and 400 metres on OM4, while single-mode modules reach 10 km. Some designers lay hybrid cable with both types in the backbone. The SFP modules at both ends must match the fibre type, the wavelength and the connector. Install more cores than you need today: spare cores are cheap compared with digging the trench again.

Redundancy. For critical sites, a fibre ring lets traffic take the other way round if one cable is cut. A ring only works safely with switches that run a loop-protection protocol (such as Rapid Spanning Tree); without it, a ring creates a loop that takes the whole network down.

Ducts and pits

  • Use proper underground ducts with draw pits at bends and at intervals, so cables can be pulled later without digging.
  • Leave a spare duct or a draw rope in each run.
  • Mark duct routes on the site plan and record them before paving.

Wireless links where trenching is impossible

Where a road, a neighbour's land or a heritage wall blocks a trench, a point-to-point wireless link can join two buildings. It needs clear line of sight, solid outdoor mounting and surge protection. It is a good tool, but fibre is more reliable for the main backbone.

Outdoor Wi-Fi

Pools, gardens, beach areas, warehouse yards and estate roads need outdoor-rated access points on poles or walls, with weatherproof cabling. Coverage outdoors depends heavily on trees, walls and the shape of the site, so survey before buying. Avoid stretching wireless mesh across a whole estate: every wireless hop costs speed and reliability, as our mesh vs managed access points comparison explains. The business Wi-Fi design guide covers access point planning inside buildings.

Separation and management

  • VLANs for each system: residents or guests, staff, CCTV, access control, building systems, payments.
  • Central management of switches and access points, so one person can see and configure the whole site.
  • Monitoring and alerts when a switch, access point, camera or link goes down.
  • Documentation: cables labelled at both ends, a network diagram, a fibre map and an IP address plan. The IP subnet calculator helps plan address ranges.

Power over Ethernet

Cameras, access points and intercoms are usually powered over the network cable. Add up the power each switch must supply and leave headroom; the PoE budget calculator does the sums.

Real examples

These Extrion projects used the same building blocks:

  • Agwaya Residential: a residential property with LAN, fibre, CCTV, access control, smart and automated security, and fire and safety systems.
  • Kilimo warehouse, Malindi: LAN, fibre, CCTV, access and security, fire systems and PA in a warehouse setting.
  • Skills Lab Center, Lumumba: a training facility with LAN, fibre, CCTV, PA, fire and safety, and IT infrastructure.
  • Mnazi Mmoja Hospital buildings, including the Neuro Surgery Building and the OPB Hospital: LAN, fibre, CCTV, fire systems, PA and nurse call across a working hospital site.

Build it in phases

Phase 1: plan and lay the passive infrastructure. Site survey, network design and duct plan; ducts, pits and fibre to every building, including future ones; a core room with power, earthing, surge protection and a UPS. This phase is the hardest to change later, so do it during construction if you can.

Phase 2: core systems. Core and building switches, firewall and internet links with failover; Wi-Fi in buildings and key outdoor areas; CCTV at gates, perimeters and main buildings.

Phase 3: full site services. Access control, intercoms, PA and fire alarm interfaces; full outdoor Wi-Fi; a fibre ring for redundancy, monitoring and a spare-parts stock.

Planning checklist

  • Get an up-to-date site plan with all current and future buildings.
  • Choose a core room that can be kept cool, dry and secure.
  • Measure the distances; use fibre between separate buildings and for anything over 100 metres.
  • Plan duct routes and draw pits before landscaping or paving.
  • Specify more fibre cores than currently needed, and matching SFP modules.
  • Plan a UPS, earthing and surge protection for every cabinet.
  • List every system that will use the network and give each a VLAN.
  • Survey outdoor Wi-Fi before buying access points.
  • Specify outdoor-rated, sealed equipment and stainless fixings near the coast.
  • Arrange two internet connections on different technologies.
  • Calculate the PoE budget for each switch.
  • Label all cables and fibres, and keep a diagram and fibre map.
  • Set up monitoring and alerts.
  • Keep spare switches, access points, SFP modules and fibre patch leads on site.

Common mistakes we see

  • Copper between buildings. The most common cause of switches failing in storms.
  • Too few fibre cores. A cable with only enough for today means a new trench tomorrow.
  • No ducts. Cable buried directly cannot be replaced without digging.
  • Network planned after landscaping. Paving and gardens get dug up at great cost.
  • A fibre ring without loop protection. The "redundant" ring becomes a loop that stops everything.
  • Mismatched SFP modules. Single-mode optics on multimode fibre, or different wavelengths at each end, give no link.
  • No UPS in building cabinets. Each cut breaks the network into isolated pieces.
  • Everything on one flat network. A resident's infected laptop can reach the CCTV recorder or the gate controller.

Warning Trenching, working at height on poles and roofs, and work on mains power are hazardous. Fibre splicing produces tiny glass fragments that can injure eyes and skin, and fibre carries invisible laser light: never look into a connector. Leave these jobs to trained installers with proper safety equipment.

Relevant Extrion services

See also our real estate and construction, hospitality and tourism and agriculture and warehousing pages.

When to call Extrion

If you are developing or upgrading a resort, estate, campus or warehouse, Extrion can survey the site, design the backbone and install it. See our network architecture service or contact us.

This guide is general information. Procedures, product features and firmware change, so check your own equipment's documentation before you start.

FAQs

Frequently asked questions

When should we involve a network designer?

As early as possible, ideally at design stage. Ducts and cabinet locations are cheap to plan and expensive to add later.

Why fibre between buildings instead of network cable?

Copper Ethernet is limited to 100 metres per run and can carry lightning surges between buildings. Non-metallic fibre covers much longer distances and does not conduct electricity, so a storm at one building does not destroy the switch at the other.

Single-mode or multimode fibre?

Single-mode handles long distances and higher future speeds, and is the common choice for site backbones. Multimode can suit shorter runs inside a building. The modules at each end must match the fibre you choose.

Can a wireless link replace fibre?

For one or two hard-to-reach buildings, yes. For the main backbone, fibre is more reliable and is not affected by weather, trees or new buildings in the way.

How do we keep the network running during power cuts?

Put a UPS in every cabinet with active equipment, sized for the time your generator takes to start and stabilise, with margin. A core-only UPS leaves the buildings dark.

Does each building need its own internet connection?

Usually not. One or two connections at the core, shared over the backbone, are easier to manage and secure.

Do we need a fibre ring?

Only where an outage is costly, such as a hospital or a large resort. A ring needs switches with loop protection configured; a simple star is fine for many sites.

Planning a Fibre Optic Installation?

From links between buildings to fibre backbones inside them, we plan the route, terminate and test every core.

Still stuck, or want more detail?

Ask for clarification, tell us a problem this did not solve, or suggest a topic. An engineer reads every message, and we use them to improve the Knowledge Center.

What would you like to do?
online now People browsing Extrion Tech right now

Scan to open this page

Point your phone camera at the code to open this page on your phone, or share it with someone nearby.

QR code that opens this page

https://mail.extrion.co.tz/knowledge-center/network-planning-for-large-properties-zanzibar

Download QR

Let’s start with you Who should our team speak to about this service?
How should we reach you?

Spam protection